I'll suggest to do it with HIPS IPS disable. First disable IPS through ePO policy and run HIPS uninstall task and see.
It was not enabled in first place.
i have managed to remove it by deploying it again, than remove task and reboot the machine.
Some where is working some where is not.